Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/eIAjg3CiY3Mi_hiZQ1qv6wZzb_s.roa
File: eIAjg3CiY3Mi_hiZQ1qv6wZzb_s.roa (raw, json)
Hash identifier: 0VHL8dNRCWtY3U9FsisIK+yIftWh4d0//02eZdVbL24=
Subject key identifier: 78:80:23:83:70:A2:63:73:22:FE:18:99:43:5A:AF:EB:06:73:6F:FB
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 019427B695AF3A9790C91320E78B264D865A
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/eIAjg3CiY3Mi_hiZQ1qv6wZzb_s.roa
Signing time: Thu 02 Jan 2025 15:51:04 +0000
ROA not before: Thu 02 Jan 2025 15:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152672
IP address blocks: 185.39.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:95:af:3a:97:90:c9:13:20:e7:8b:26:4d:86:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Jan 2 15:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7880238370a2637322fe1899435aafeb06736ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b5:a1:04:6a:57:7b:8d:1d:4c:e0:79:67:76:
f1:10:e2:9a:ce:53:10:68:ba:ee:68:dc:6b:db:1d:
8b:fb:b0:22:73:84:47:16:02:30:8e:c6:f7:c3:b1:
1b:ad:eb:11:29:9a:36:59:3b:b5:42:9f:10:78:e2:
9d:bc:5e:2a:e7:13:13:97:6f:34:28:92:11:d7:13:
f8:18:87:3f:74:ca:a2:ab:a6:3c:57:12:5b:44:1d:
13:75:48:3a:27:20:59:de:2c:54:f8:b2:14:d2:6c:
4e:f0:2d:6d:81:ed:45:ac:38:b6:2e:fa:05:db:5d:
b3:bf:00:d3:f7:3f:67:ea:dc:d1:d3:fe:44:5d:70:
63:24:7b:1d:2c:d4:eb:19:71:b8:72:73:42:24:e2:
eb:f7:d1:91:2e:23:47:5b:b0:55:30:55:a0:fa:cc:
14:c6:c0:99:9c:e9:b9:11:fe:1c:a0:d6:eb:74:a9:
09:16:a9:0a:46:3d:f7:b8:df:d1:20:6d:fa:08:2b:
17:53:27:50:22:2a:76:58:d1:0b:20:9c:62:43:76:
37:a8:fd:2a:93:ec:12:1d:04:20:a4:82:19:01:6f:
08:7f:4e:20:79:82:6d:9d:21:19:46:44:b9:f7:cb:
ee:be:33:f6:62:1d:9c:46:44:d9:72:42:5c:11:b5:
42:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:80:23:83:70:A2:63:73:22:FE:18:99:43:5A:AF:EB:06:73:6F:FB
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/eIAjg3CiY3Mi_hiZQ1qv6wZzb_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.51.0/24
Signature Algorithm: sha256WithRSAEncryption
32:44:a1:7c:9f:84:95:be:ce:27:7c:ec:29:44:fe:e5:89:95:
a7:6c:e6:04:97:f0:53:be:b4:71:21:05:c0:42:2b:04:25:88:
1b:be:22:9c:ff:1d:9a:7d:6f:a8:6d:f0:2c:51:c7:1d:6a:c2:
0c:65:d0:c9:92:16:0b:52:fd:0a:76:4c:fd:42:2d:0a:0f:a5:
35:e8:91:ae:f0:ce:fb:e6:8f:c8:0f:96:32:cf:95:ec:16:fe:
d2:53:f4:37:07:fd:12:08:79:3f:db:16:e3:a8:6b:42:df:76:
f6:ba:81:44:8f:d3:3e:ec:59:c5:d3:f8:c4:b1:08:7e:95:f0:
85:38:1f:b8:f5:d6:fb:8a:77:7a:4d:b9:fa:33:54:99:d2:25:
67:e6:68:5e:ec:4b:9b:32:8b:52:11:55:12:97:39:1b:69:c2:
67:84:2a:ce:7c:21:76:7c:73:a8:d1:b1:b2:6b:66:08:e8:54:
6f:2b:d2:c0:8b:2b:79:bd:8e:6e:c8:f3:8b:a3:28:36:e5:3d:
86:1a:75:16:b7:8e:ad:86:d4:18:39:d7:f3:af:22:04:e9:b9:
fd:29:3c:15:99:97:81:9c:a5:62:ac:4a:84:8e:a0:ac:d9:c7:
3b:57:5f:6f:a5:46:51:ef:6f:ed:f9:b9:d0:ef:3f:cb:4b:41:
60:df:12:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:23:07 2025 by rpki-client